$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0375d37a-cd61-4971-8440-9dcd5a7027fe.roa File: 0375d37a-cd61-4971-8440-9dcd5a7027fe.roa (raw, json) Hash identifier: zdjvDn6uZC9p5Hw0LiEA2Us49CLRvt34URi6KAq1K8A= Subject key identifier: 55:CA:D9:A9:33:AE:CB:B2:29:40:3F:BE:FF:AD:DE:14:7A:7A:4D:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EC3EC6FB3530B610CBEFE429098A09CD53CC6AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0375d37a-cd61-4971-8440-9dcd5a7027fe.roa Signing time: Fri 23 Oct 2026 00:50:04 +0000 ROA not before: Fri 23 Oct 2026 00:50:04 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c3:ec:6f:b3:53:0b:61:0c:be:fe:42:90:98:a0:9c:d5:3c:c6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 23 00:50:04 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=fd817f6bd089450b4fb6840997a7d1092084836ca438a4d372bf96b24d2a8428, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:32:c2:85:e8:db:50:f8:ec:be:90:25:a9: 3e:dc:ed:08:81:6c:e8:6b:42:3d:72:c5:5f:d1:d6: 68:17:ba:5f:dd:af:eb:fa:be:1a:a0:d4:08:74:c9: 39:33:70:27:40:23:31:95:f7:e6:08:3f:a1:d9:27: 5f:62:f3:95:a7:29:0d:9a:31:10:e1:a4:3d:2f:47: 21:52:ac:f0:e6:65:d6:a0:2f:37:2d:6a:00:3b:8b: c4:ea:69:e5:3d:de:74:94:cc:7d:8c:12:f7:d3:ed: 1f:fc:bd:c1:50:c5:f8:0b:9a:9f:15:fb:56:1a:89: 68:36:d1:a5:66:45:73:6d:67:5f:6d:d1:42:cd:96: 6d:3d:49:43:2e:e6:78:c5:52:aa:22:9a:81:00:0a: 51:80:ba:d9:56:b5:e1:a9:ba:95:ce:60:c9:24:24: 40:e8:0b:56:23:24:aa:b2:2c:77:01:78:88:4d:92: 8e:34:00:35:2f:d9:a5:05:14:9c:81:79:78:02:ad: ea:2a:fc:b9:ae:dd:58:f4:3d:c0:e1:d4:cf:1d:bb: ca:9f:e9:be:ea:42:9d:28:a3:9b:aa:1c:7a:cb:f3: 33:ad:08:fc:52:67:66:7f:0a:ac:17:b8:6d:c3:98: 58:f4:80:e0:fe:42:c5:63:4c:40:08:46:97:dd:61: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:D9:A9:33:AE:CB:B2:29:40:3F:BE:FF:AD:DE:14:7A:7A:4D:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0375d37a-cd61-4971-8440-9dcd5a7027fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.244.0/23 Signature Algorithm: sha256WithRSAEncryption ac:3a:64:f1:2d:fa:90:2c:51:1e:3f:81:f4:6d:0a:30:fa:db: 24:6d:34:0a:3c:63:97:59:e0:92:cd:81:b4:34:76:35:f9:7c: 1c:90:d4:95:f3:aa:93:b9:3d:35:c6:6b:df:34:a9:ab:aa:74: 40:66:ae:84:a5:a5:dd:5b:82:02:d2:21:25:ed:f0:a4:31:17: 3b:64:52:b8:b4:1b:3b:74:34:2a:62:41:db:e5:d3:18:61:d8: 8e:0e:9c:69:1f:0b:d0:d3:8e:b9:79:f8:c5:d5:e4:16:72:5d: 63:54:92:10:20:b5:3d:5b:11:c7:e4:09:c3:fc:fa:75:a8:41: 4d:83:cf:51:ed:32:d3:95:1e:f3:14:0a:43:af:0a:1e:84:1f: cb:d7:87:84:f0:ae:ae:14:67:44:fe:37:a8:09:25:79:05:ed: 52:57:65:9d:2a:38:b2:51:0c:fb:ba:3b:30:1f:92:9d:f7:6b: 33:a6:7c:e6:61:ab:f0:71:49:1d:96:df:5f:e2:fa:98:42:db: 9a:d8:ee:9c:df:6a:7d:34:45:4f:83:c2:f3:18:2a:b3:6e:b1: c5:9e:88:e1:2f:64:94:53:85:e0:0e:43:d1:cc:9b:f7:2d:3d: de:24:7b:05:6a:11:fd:cc:f2:38:fd:76:e5:74:5e:c6:e5:ae: 2b:c2:46:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPsPsb7NTC2EMvv5CkJignNU8xqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIzMDA1MDA0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDgxN2Y2YmQwODk0NTBiNGZiNjg0MDk5N2E3ZDEwOTIw ODQ4MzZjYTQzOGE0ZDM3MmJmOTZiMjRkMmE4NDI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+gjLChejbUPjsvpAlqT7c7QiBbOhrQj1yxV/R1mgXul/d r+v6vhqg1Ah0yTkzcCdAIzGV9+YIP6HZJ19i85WnKQ2aMRDhpD0vRyFSrPDmZdag LzctagA7i8TqaeU93nSUzH2MEvfT7R/8vcFQxfgLmp8V+1YaiWg20aVmRXNtZ19t 0ULNlm09SUMu5njFUqoimoEAClGAutlWteGpupXOYMkkJEDoC1YjJKqyLHcBeIhN ko40ADUv2aUFFJyBeXgCreoq/Lmu3Vj0PcDh1M8du8qf6b7qQp0oo5uqHHrL8zOt CPxSZ2Z/CqwXuG3DmFj0gOD+QsVjTEAIRpfdYR8dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVcrZqTOuy7IpQD++/63eFHp6TRcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzNzVkMzdhLWNkNjEtNDk3MS04NDQwLTlkY2Q1YTcwMjdmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9fQwDQYJKoZIhvcNAQELBQADggEBAKw6ZPEt+pAsUR4/gfRtCjD62yRt NAo8Y5dZ4JLNgbQ0djX5fByQ1JXzqpO5PTXGa980qauqdEBmroSlpd1bggLSISXt 8KQxFztkUri0Gzt0NCpiQdvl0xhh2I4OnGkfC9DTjrl5+MXV5BZyXWNUkhAgtT1b EcfkCcP8+nWoQU2Dz1HtMtOVHvMUCkOvCh6EH8vXh4Twrq4UZ0T+N6gJJXkF7VJX ZZ0qOLJRDPu6OzAfkp33azOmfOZhq/BxSR2W31/i+phC25rY7pzfan00RU+DwvMY KrNuscWeiOEvZJRTheAOQ9HMm/ctPd4kewVqEf3M8jj9duV0XsblrivCRsI= -----END CERTIFICATE-----Generated at Sat Nov 7 22:57:07 2026 by rpki-client